From 1ba69a3d436b1b37533b97ab714ee5400b870e1f Mon Sep 17 00:00:00 2001 From: matt Date: Fri, 22 Apr 2022 04:44:32 +0000 Subject: [PATCH] Block parents from the admin panel --- app.js | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/app.js b/app.js index 7ec650b..168e53e 100644 --- a/app.js +++ b/app.js @@ -132,6 +132,12 @@ async function main() { if (!allowed.includes(path) && !req.session.authenticated) return res.redirect(`/login?redirect_to=${req.path}`); + else if (req.path !== '/admin/parent-login' && + !allowed.includes(path) && + req.session.userType === 'parent' + ) + return res.redirect('/admin/parent-login'); + next(); });